github.com/babylonlabs-io/babylon/v2

6 results · Feed

• Medium —
  GHSA-4rmq-mc2c-r495

  Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond

  ### Summary A state consistency bug in `x/costaking` can leave a BTC delegator with non-zero `ActiveSatoshis` (Phatom Stake) even after they have fully unbonded their BTC delegation, if their Finality Provider (FP) drops out of the active set in the exact sam…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v3 github.com/babylonlabs-io/babylon/v4 Go
  Dec 9, 2025
• High —
  GHSA-m6wq-66p2-c8pc

  Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers

  ### Summary A vulnerability exists in Babylon’s BLS vote extension processing where a malicious active validator can submit a VoteExtension with the `block_hash` field omitted from the protobuf serialization. Because protobuf fields are optional, unmarshallin…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v4 github.com/babylonlabs-io/babylon/v3 Go
  Dec 8, 2025
• Medium —
  GHSA-xq4h-wqm2-668w

  Babylon's BIP322 signature implementation is not fully compliant to the spec

  ### Summary The BIP-322 signature verification does not enforce the SIGHASH value to be SIGHASH_ALL, and therefore is not strictly following the [spec](https://bips.dev/322/). ### Impact Non-compliant BIP-322 signatures in proof of possessions can be accepted…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v3 github.com/babylonlabs-io/babylon/v4 Go
  Nov 24, 2025
• High —
  GHSA-2fcv-qww3-9v6h

  Babylon's malformed vote extensions are not rejected

  ### Summary Adversarial validators can send large vote extensions by using non-existing protobuf tags. This will result in the rejection of the subsequent block proposal. Eventually, all block proposals will be rejected by all validators. ### Impact A small g…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v3 github.com/babylonlabs-io/babylon/v4 Go
  Nov 24, 2025
• High —
  GHSA-rj53-j6jw-7f7g

  Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary

  ### Summary Sending a message that modifies the validator set at the epoch boundary halts the chain. ### Impact Denial of Service - Comos-sdk prevents modifying the validator set from two different modules - https://github.com/cosmos/cosmos-sdk/blob/release/v…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 Go
  Jul 8, 2025
• High —
  GHSA-56j4-446m-qrf6

  Babylon vulnerable to chain half when transaction has fees different than `ubbn`

  ### Summary Sending transactions with fees different than native Babylon genesis denom (`ubbn`) leads to chain halt. ### Impact Denial of Service - Due to panic in the `x/distribution` module `BeginBlocker` triggered by a error when sending fees from `feeColl…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 Go
  Jun 30, 2025